$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: /0//IttjRspOWYLqhIjMjfig3w4hooe2G9XGxZcgvik= Subject key identifier: B7:C5:20:C6:75:CD:27:0E:D0:D9:49:3A:D3:F0:00:DA:39:13:2F:2D Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 084A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 083A Signing time: Fri 22 Aug 2025 20:52:18 +0000 Manifest this update: Fri 22 Aug 2025 20:52:18 +0000 Manifest next update: Fri 29 Aug 2025 20:52:18 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: ioXoXeKPwLPOl0tyHJ3dgYZCtNKsXGnzFeeGTAUnYAc=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Aug 22 20:52:18 2025 GMT Not After : Aug 29 20:52:18 2025 GMT Subject: CN=68a8d882-215c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:c0:98:99:09:ad:4e:d8:fd:e7:97:56:83: 71:a2:d8:9c:9a:dd:85:14:35:9a:9f:ba:b8:ba:7d: e1:d7:3a:91:fb:a0:66:69:52:02:17:58:ba:6d:b8: 10:f0:fc:19:cc:db:40:02:62:c0:a4:3e:62:83:7f: ff:25:6f:1c:c1:a3:75:07:a5:17:94:b2:4e:5d:1b: b8:7d:bd:03:0c:a7:9a:14:9d:01:94:c3:1c:3b:ac: 31:f1:fc:f5:78:ea:82:9c:c0:be:fb:05:96:64:22: 92:3b:4d:19:65:2c:a3:24:bb:e8:51:5c:cb:8d:c4: ef:87:0e:3c:6d:b5:25:88:30:0c:84:ab:33:d1:c0: 38:72:57:4f:1e:5d:34:8c:3e:e1:fd:2c:47:11:b3: 3f:31:02:01:76:0a:a5:94:7f:5b:76:18:10:9b:cf: e4:41:90:7f:70:61:13:99:e0:af:61:5a:91:e8:de: 78:6f:a5:04:5f:ae:ab:db:56:68:a5:7e:b6:62:2f: fa:1e:8f:1b:4d:63:0a:63:07:6c:9a:f5:a3:2f:a4: 7e:31:9e:d4:ba:64:7b:c2:34:5a:66:dd:35:7b:99: 36:24:76:4e:d8:cf:c7:60:74:90:d1:5f:96:72:fc: 32:32:c4:06:22:fa:0a:f9:e2:f6:71:ef:5d:b1:d9: 33:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C5:20:C6:75:CD:27:0E:D0:D9:49:3A:D3:F0:00:DA:39:13:2F:2D X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:3f:cb:ea:20:0a:d9:1f:00:a3:43:90:20:af:e1:7c:24:f0: c0:14:ef:13:9b:6e:44:dc:56:8a:76:86:ab:9e:25:3e:d3:d8: 3f:e9:f8:53:30:f9:75:49:73:3a:a4:ba:fa:a4:25:f6:4b:d0: 7d:99:7c:9c:b0:3e:1c:e1:28:cd:56:58:fc:1f:f4:00:ff:e2: 4f:f3:c8:d2:5e:3e:f8:0b:35:b5:93:2c:11:b0:42:17:71:b7: 35:f6:2f:b4:30:0b:4a:6f:8a:ea:6e:67:45:85:06:7e:5e:7e: b6:04:9f:49:2b:f7:99:eb:36:03:86:a5:22:01:76:3f:1c:d8: ba:31:6f:ad:39:56:47:8a:6b:75:b0:dc:53:b7:b4:c0:65:7c: db:ff:71:a0:1f:c6:10:3f:d4:4f:d1:8f:02:67:e0:f6:1b:fa: d1:d5:de:06:f7:1a:ac:e9:70:69:5f:fe:50:0d:30:d7:3d:d6: a5:23:5a:59:65:32:11:fe:6b:b0:15:39:6d:94:11:64:59:ce: 33:ac:f5:84:11:5e:d8:ea:20:ac:7d:c8:4a:c7:97:1c:28:9c: bb:57:ef:9d:33:ac:73:0b:9a:e8:9c:a6:0f:ee:b9:f7:aa:27: 21:f3:3d:75:13:97:1a:41:a4:d1:37:7c:92:bc:2a:91:9b:99: 87:66:47:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwODIyMjA1MjE4WhcNMjUwODI5MjA1MjE4WjAYMRYwFAYD VQQDEw02OGE4ZDg4Mi0yMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwPAmJkJrU7Y/eeXVoNxoticmt2FFDWan7q4un3h1zqR+6BmaVICF1i6bbgQ 8PwZzNtAAmLApD5ig3//JW8cwaN1B6UXlLJOXRu4fb0DDKeaFJ0BlMMcO6wx8fz1 eOqCnMC++wWWZCKSO00ZZSyjJLvoUVzLjcTvhw48bbUliDAMhKsz0cA4cldPHl00 jD7h/SxHEbM/MQIBdgqllH9bdhgQm8/kQZB/cGETmeCvYVqR6N54b6UEX66r21Zo pX62Yi/6Ho8bTWMKYwdsmvWjL6R+MZ7UumR7wjRaZt01e5k2JHZO2M/HYHSQ0V+W cvwyMsQGIvoK+eL2ce9dsdkzcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfFIMZ1 zScO0NlJOtPwANo5Ey8tMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWP8vqIArZHwCjQ5Agr+F8JPDAFO8Tm25E3FaKdoarniU+09g/6fhT MPl1SXM6pLr6pCX2S9B9mXycsD4c4SjNVlj8H/QA/+JP88jSXj74CzW1kywRsEIX cbc19i+0MAtKb4rqbmdFhQZ+Xn62BJ9JK/eZ6zYDhqUiAXY/HNi6MW+tOVZHimt1 sNxTt7TAZXzb/3GgH8YQP9RP0Y8CZ+D2G/rR1d4G9xqs6XBpX/5QDTDXPdalI1pZ ZTIR/muwFTltlBFkWc4zrPWEEV7Y6iCsfchKx5ccKJy7V++dM6xzC5ronKYP7rn3 qich8z11E5caQaTRN3ySvCqRm5mHZkeR -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:02 2025 by rpki-client